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replace the paragraph on Page 1, beginning on line 
following amended paragraph. 



card is a device which keeps tamper-prohibited 
formation wfeL ch is not - allowed to tamp er? or 
cryption of data or decryption of a ciphertext with 
secret keys. An IC card itself does not have its 
Supply, and when it is inserted into a reader/writer 
card, power is supplied to the IC card and it is 
e. After it is made operable, the IC card receives 
ansmitted from the reader /writer , and following the 
IC card processes, for example, transfer of data, 
explanation of an IC card is given in Junichi 
IC card" , Ohm - cha, — deash- i ^ t s uu sfe Ux jouhou - gakkai- 
ion, compiled by the Society of Electronic 



the 



Co;rporatJ 



Communicat Lon and Information, etc. 



Pleas 5 replace the paragraph on Page 16, beginning on 
line 2, wibh the following amended paragraph. 
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As a 
the like is 
Introduce 



rrlethod of calculation, an addition chain method or 
often adopted (refer to "Angouriron Nyuumon" ( tt An 
to the Theory of Cryptography") ) ; however, with 



such an algorithm processing speed is slow, and the time 
required fd>r a transaction utilizing an IC card may exceed the 
user's allowable time. Therefore, it is the CRT to produce M 
; from the result of a modular exponentiation for 2 prime 
factors, P and Q, of the public modulus N, instead of simply 
performing the modular exponentiation for X and N. 



J Pleas£ 
line 21/ 
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replace the paragraph on Page 22, beginning on 
with the following amended paragraph. 



Note that the above-mentioned addition chain method and 
sliding wihdow method can be executed with the use of a 
technique railed the Montgomery method. The Montgomery method 
is one to De used for the high speed execution of the modular 
multiplication arithmetic operation, AB MOD N. In particular, 
it is suit|ad to implementation by hardware. The algorithm of 
the method] will be briefly explained. Details are described in 
Montgomery] • s literally work, "Modular Multiplication without 
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ion" , Mathematics of computation 44, 170, pp. 519 
5) , 

replace the paragraph on Page 42, lines 11-24, 



Please 



with the following amended paragraph. 



the 
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convenience of explanation, it is assumed that 
an arithmetic operator of 8 bits width, and the 
esjch of bus lines, 1606, 1607 and 1608 is 16 bits, 
will be made for two registers. The register 1610 
the source side, and the register 1613 is used on 
tindtion side. The ^eg^et or - 1610 has registers 1610, 
have the capacity of 16 bits and it i s are composed 



8 bits -16££- 1609, 1612 and LOW side 8 bits 161l f 
respectively . There is provide a CCR (Condition 



1615 for storing flags: flags showing the 
operation; for example, a 0 flag which shows 1 when 
<tf the result is 0, and which shows 0 if the result 
ox a carry- flag which shows carry up. The CCR is 
o the ALU 1605 and to the various kinds of buses 
7, 1608) - 
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Please 
line 14 thr 
paragraph . 



replace the paragraph on Page 45, beginning on 
:>ugh Page 47, line 4, with the following amended 



in the 
[0] , B «= (B 
is a 16-bit 
calculating 
received (s 
to receive 
A and B 
the counter 
conditiona 
is N or not: 
.been proce 
is not N, 
1 bit 

conditional, 
is judged, 
source regf 



det ermined 



r andc m 
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following, we put: A (A[N-1] A[N-2] . . - A[1]A[- 
[N-l]B[N-2] . . . B[1]B[0] (each of A [J] and B [ J] 
block. Fig. 22 shows the procedures of 
the sum of A and B. At first, A and B are 
tep 1801) - In this place, "receive" means not only 
the signals through the I/O port; but also to have 
as a result of other calculation. Next, 
J is initialized to 0 (step 1802) . The 
branch process (step 1803) judges if the counter 
When J = N, it means that all bit blocks have 
ised, so that the processing is put to an end. If J 
t^he process is advanced to step 18 04. At step 1804, 
number V is generated. After that, at the 
branch process of step 1805, whether V is 0 or l 
in the case of 0, A [J] is transferred to the 
ster RS (Step 1806). After that, B [J] is 
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to the destination register RD (step 1807) . After 
RS, RD is executed (step 1810) - At step 1810, the 
values of RS and RD is calculated, and the value is 

to RD - When a carry up occurs, it is held as a 
in the process of the next ADD. W, the process of 
executed. Since this portion is processed by the 
of ADD . W, it is not written in the flow chart. A 
of assembler language does not usually handle the 
of carry. Next, the contents of RD are stored onto 
position C[J] on the RAM (step 1811). Next, J 
by 1 (step 1812), and the procedure is returned 
branch process of the step 1803. 
when V is 1, B [ J] is transferred to the destination 

(step 1808) . After that, A [J] is transferred to 
register RS (step 1809) . After that, ADD. W RS, RD 
(step 1810) . At step 1810, the sum of the values 
:*D is calculated, and the value is transferred to 
larry up occurs, it is held as a carry, and in the 
the next ADD . W process, the process of adding 1 is 
Next, the contents of RD [[is]] are stored to the 
position C [Jl on the RAM (step 1811). Next, J is 



conditional 



RD 
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by 1 (step 1812) , and the procedure moves back to 
onal branch process of step 1803. 

replace the paragraph on Page 49, beginning on 
Page 51, line 2, with the following amended 



and Fig- 25 show the procedures of calculating 
of A and B. At first, A and B are received (step 
this place the word "receive" means not only to 
signals through the I/O port; but also to have A 
as a result of other calculation. Next, the 
and J are initialized to 0 (step 2002) . The 

branch process (step 2 003) judges whether the 
Is N or not. If J ~ N, it means all bit blocks have 
gsed, so that the procedure is brought to an end. 
: N/ the procedure is advanced to step 2004. At 
1 bit random number V is generated. After that the 
branch process (step 2005) judges if V is 0 or 1. 
, A [I] is transferred to the source register RSL 
, and after that B [ J] is transferred to the 
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register RDL (step 2007) ♦ After that, MULT I RSL, 
(step 2 010) , and the value of the destination 
in which the value of the partial product is 
transferred to the temporary storage area TMPl on 
2011) . Next, the counter is incremented by 1 
, and the process is advanced to the conditional 
s (step 2013) . The conditional branch process 
judges if the counter I is N . If I = N, the 
incremented by 1 and I is initialized to 0 (step 
the process procedure is returned to the 
branch (step 2003) to perform operations as 
sjbove . At the conditional branch process (step 
is not N, 1 bit random number V [ [of] ] is 
step 24>i£ 2014 ) , then V is checked (step 2015) , and 
fter A[l] is transferred to RSL (step 2016), B [J] 

to RDL (step 2017) . Inversely, if V = 1, after 
nsferred to RDL (step 2018), A[I] is transferred to 
019) . After processing of either step, step 2017 
9, MULTI RSL, RD is executed (step 2020), and RD is 

to TMP2 (STEP 2021) . Then the value of TMP2 is 
the left by 8 bits (step 2022), the sum of TMPl and 
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2 is calculated 
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procedure i 

Please 
lines 2, 



(on this operation refer to the explanation 
and the result is transferred to TMPl (step 
I is incremented by 1 (step 2024) , and the 
3 returned to the conditional branch (step 2013) . 

replace the paragraph on Page 51, beginning on 
the following amended paragraph. 



with 



to 



Tn the 
according 
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difficult \.o 
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not showing 



above process, a random number is generated and 
the value of it, the process is switched; either 
is transferred to RS and then B [ J] is transferred 
inversely first B [ J] is transferred to RD and then 
f erred to RS . With the above-mentioned 
the waveform of the consumption current of an IC 
ed[[,]]i_ in particular^ if one tries a process of 
Jhe waveforms to eliminate noises for observing the 
of data (for the typical oscilloscope, noises are 
by this method) , the waveform is observed only as 
of A and B; therefore [ [andj ] it becomes 
estimate the contents of each of them. Although 
an example is not shown , it is easy to limit the 



value 
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Please] replace the paragraph on Page 57, beginning on 
line 23, wiJth the following amended paragraph. 
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to the sum of a single 8 -bit block. In the 
, the conditional branch process is switched 
number [ [v] ] V, but is easy to change it to a 
number using a linear congruence method, a 
e or a predetermined bit pattern, and the above 
have nothing to do with the essentials of the 



F3G 



present embodiment, to utilize the embodiments 
. 22 and PIG. 26 for the change of order of the 
step 2506 and the process in step 250 7j_ will help 

ce more eff e ct improvement than to use the 
ention independently. 
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